CVE-2026-83479
HighCVSS 8.8Summary
Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.14-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to takeover of Oracle Contracts. CVSS 3.1 Base Score 8.8.
Risk Assessment
A low privileged attacker can take over Oracle Contracts, impacting confidentiality, integrity, and availability. High risk for organizations using this module.
Recommendation
Immediately apply available Oracle security updates for versions 12.2.14-12.2.15. Restrict network access to Oracle Contracts and monitor for unusual activity.
Other vulnerabilities in Oracle Contracts
See all- CVE-2026-83482High
Vulnerability in Oracle Contracts (component: Internal Operations) of Oracle E-Business Suite. Affects versions 12.2.14-12.2.15. A high-privileged attacker with network access via HTTP can take over Oracle Contracts.
- CVE-2026-83481High
Vulnerability in Oracle Contracts (component: Internal Operations) of Oracle E-Business Suite. Affects versions 12.2.14-12.2.15. A high-privileged attacker with network access via HTTP can take over Oracle Contracts.
Original NVD description (English source)
Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts. Successful attacks of this vulnerability can result in takeover of Oracle Contracts. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).